Looking For Info On Gen.variant.graftor.6464

Hi,

Bitdefender has found and removed the malware gen.variant.graftor.6464 from /media/2003server/windows/offline/webpages/cache.txt

I was wondering what this malware is and how to avoid getting it again.

Is it a trojan, virus,spyware etc? I didn't think that txt files could have viruses.

Thanks for any help.

Find more posts tagged with

Comments

rootkit

Hi and welcome to our forums.

Which version of Bitdefender do you have installed on your machine?

Thank you.

fotodude100

Hi and welcome to our forums.

Which version of Bitdefender do you have installed on your machine?

Thank you.

Hi,

Thanks for responding. I am using the Bitdefender rescue cd. I'm considering purchasing Bitdefender as it's very impressive that it was able to locate malware as I tried Windows Sweeper and Kaspersky as well with no results. I am just intrigued, specifically, as to the nature of the malware it found.

Thanks!

rootkit

Welcome back.

Now please tell me, have you updated Bitdefender before the scan?

Thank you.

fotodude100

Yes I did update the definitions to the latest at the time of the scan.

rootkit

Could you please pack that file in a zip file and send me a PM with it?

We need to investigate this, maybe is a False Positive.

Thank you.

fotodude100

Thanks for following up.

After more investigation I have found that it is the Morto worm as identified here: http://www.microsoft.com/security/portal/T...Win32%2FMorto.A

There seems to be multiple variants of this worm leading MS to change the last letter to identity a slightly different version.

Does Bitdefender have the ability to remove this threat entirely? I am skeptical that deleting this lone file will resolve this.

rootkit

Welcome back

If the infection is present only in that file, it could be a URL in that file.

A text file can not be dangerous by itself. If you can send me that file, I can tell you if it's a False Positive or not.

Thank you.

keoung

I just want to ask about this variant.graftor.9919. i just find it in my bitdefender as infected file. my file were already deleted by my antivirus because it is infected by this variant. some of my friends told me it was only a false detection of virus.

rootkit

Hello,

We have reported the situation to our Labs.

Proper actions will be taken automatically for this case.

In the future, please report any false alarms or submit samples via:

http://www.bitdefender.com/submit

Have a great weekend ahead!